Privacy policy

This policy explains how Krane Apps handles information when you use Steal a Seeker and this website. Contact hello@kraneapps.com about privacy or your data.

Playing without a wallet

You can play the free campaign without signing in. Progress, settings, equipped cosmetics and pending saves are stored on your device. Optional playtest recording is off by default; if enabled, it keeps the last 100 attempts locally. Nothing in that optional report is sent to us unless you choose to export and share it.

When you open the app, it sends us at most one anonymous signal a day: a random install code created on your device and the app version. It is not linked to your wallet, account or IP address, and we use it only to count how many people come back. These signals are deleted after a year.

Wallet accounts and purchases

If you connect a wallet, we process its public address and a signed sign-in message to verify ownership. Our backend stores account creation time, sign-in challenges, session-token hashes, purchase quotes, order status, payment signatures and receipts, entitlements, credit balances and ledger entries, progress and equipment. Sessions expire after 24 hours and sign-in challenges after five minutes; expiry is not the same as immediate deletion of the database record.

We do not ask for or receive your seed phrase or wallet private key. Your wallet handles signing. Connecting does not authorize payment. Approved SOL or SKR purchases go to our payment treasury and are checked against the Solana blockchain.

Competition and public information

Ranked play sends your run inputs, timing, results and the applicable mission rules to our backend for verification and scoring. We store attempts, scores, competition history and earned achievements. Wallet identifiers, rankings, scores and achievements can appear on public leaderboards. We may resolve your public .skr name from your wallet address, verify ownership, and cache it for display on the leaderboard. Shared courier cards include the information you choose to share through another app.

Technical and support data

Our hosting, database and network providers process technical connection information such as IP addresses and request metadata to serve and secure the app. The app keeps limited wallet diagnostics, including step names, error codes and timing; these do not include private keys, session tokens or transaction bodies. If you contact support, we process the contact details, messages and files you send to resolve your request.

Why we use information

We use it to deliver the game and purchases, restore access, verify wallet ownership, calculate rankings, prevent duplicate payments and cheating, provide support and meet legal obligations. Where a legal basis is required, this includes performing our contract with you, our legitimate interests in operating a reliable and secure game, legal obligations and consent for optional activities when applicable.

Providers and sharing

Railway hosts the API and PostgreSQL database. Solana RPC and name-service providers process public blockchain addresses and queries for transaction and .skr verification. Market-price services provide quotes. Your selected wallet and any app you use to share a card operate under their own policies. We may disclose information when required by law or to investigate fraud and protect the service. We do not sell personal information or include third-party advertising or behavioural analytics SDKs in this release. This website does not use advertising or analytics cookies.

Retention and deletion

We keep account, progress and competition information while needed to provide the service. Purchase, credit and security records may be retained as needed to reconcile payments, resolve disputes, prevent fraud or satisfy legal obligations. There is no automatic short-term purge of all account records in this release. You can request deletion or access using the account deletion page. We will explain any records we must retain and why. Backups may retain a copy until they expire through normal rotation.

Transactions recorded on a public blockchain cannot be erased by us. Deleting app data or uninstalling the app removes local data but does not delete a wallet-linked server account or blockchain records.

Your choices and rights

You can disconnect your wallet, stop optional playtest recording, delete the local report, decline purchases and choose whether to share a card. Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of your data or complain to your local privacy regulator. Email us to make a request; we may need to verify wallet ownership. We never require a seed phrase or a payment for that verification.

Security and international processing

We use HTTPS, wallet signatures and access controls. No system can guarantee complete security. Service providers may process information outside your country; applicable transfer protections are used where legally required.

Age and updates

Steal a Seeker is not directed to children under 18. If you believe a child provided personal information, contact us. Material changes will be reflected on this page with an updated date and, where required, further notice or consent.